7 Commits
Author SHA1 Message Date
chengcheng 024f9267a9 fix(security): drop SYS_ADMIN from video editor
The published service disables the Chromium sandbox and does not perform system administration operations, so the broad capability is unnecessary. Drop all capabilities, prevent privilege escalation, and use the runtime default seccomp profile.
2026-07-23 11:12:03 +08:00
chengcheng 0355be3932 fix(deploy): 补齐生产首次启动必填配置 2026-07-16 18:28:13 +08:00
chengcheng d6ef8b0a23 docs(deploy): 补充基础依赖规格与容量基线 2026-07-16 17:29:08 +08:00
chengcheng 1ff5a5f27b fix(deploy): 补全 Redis 逻辑 DB 配置 2026-07-16 17:09:39 +08:00
chengcheng 20861e6814 docs(deploy): 澄清 RabbitMQ 版本与配置边界 2026-07-16 12:20:28 +08:00
chengcheng 13048672a9 feat: 补充 MongoDB 配置和 RabbitMQ 集群部署 2026-07-13 16:52:09 +08:00
chengcheng 821ffe9e70 初始化提交 2026-07-09 19:29:46 +08:00